Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.1

Tektronix 3 Series MDO devices allow remote file read/modify

CVE-2026-111854 · published 19 days ago
Summary

The Tektronix 3 Series MDO devices with software older than version 1.21.1 can be made to open any file on the instrument. This could let an attacker view or change files, potentially affecting the device’s operation or exposing data. Install the latest software update (1.21.1 or newer) and limit network access to trusted personnel.

What to do
  • Update tektronix 3 series mdo to version 1.21.1 or later.
Affected software
VendorProductAffected versions
tektronix 3 series mdo < 1.21.1
Original advisory text
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary ...
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.1 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published17 Oct 2026
Updated4 Nov 2026
First seen17 Oct 2026
Sources
CVE-2026-111854 · NVD
CVE-2026-111854 · MITRE
Track software like this
Free during beta